Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4GPV-OGfLf3XsX3QqBmIHnQcOFE.roa
File: 4GPV-OGfLf3XsX3QqBmIHnQcOFE.roa (raw, json)
Hash identifier: JDOSBRcmzgw6iW9c6inX7wCECxQmXWmYd9vPXsFRBZs=
Subject key identifier: E0:63:D5:F8:E1:9F:2D:FD:D7:B1:7D:D0:A8:19:88:1E:74:1C:38:51
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43B0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4GPV-OGfLf3XsX3QqBmIHnQcOFE.roa
Signing time: Thu 24 Feb 2022 00:30:08 +0000
ROA not before: Thu 24 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17328 (0x43b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 24 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E063D5F8E19F2DFDD7B17DD0A819881E741C3851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:31:2a:79:82:0c:e7:4f:11:f7:d0:a6:d1:
1f:af:3d:d7:97:e1:f9:1d:33:97:da:fa:15:5d:27:
ae:63:70:ce:d9:4f:b7:62:c8:cc:b7:0b:9b:8c:20:
61:c5:9f:23:40:75:59:9e:50:48:3f:da:ce:82:59:
85:98:57:b2:25:3d:79:be:94:d9:68:5e:89:1c:93:
d4:86:00:bc:f6:b5:5a:03:ba:5b:fe:9c:5d:e5:f2:
cb:4c:77:eb:45:8f:47:28:9c:d6:88:af:a8:c3:0e:
ec:b6:79:63:bf:6e:c3:31:ef:34:19:67:61:ad:85:
a4:3f:39:dd:4a:7c:7c:16:dd:2a:39:8c:32:74:2f:
93:5a:79:94:49:65:0d:ce:9f:6b:e5:1c:ea:20:8a:
af:93:00:93:36:60:e1:ce:3e:8f:b8:91:eb:bc:7f:
66:f8:2b:1c:7c:e7:a5:94:2c:30:22:58:aa:0e:a8:
c7:00:83:07:71:38:44:ba:81:26:d7:3b:27:fa:26:
fa:10:33:7e:2e:85:20:a7:3a:f2:5e:f1:6f:28:12:
81:9d:0e:1d:9e:e2:5c:38:77:62:cc:b3:08:e7:92:
86:b4:8a:7b:71:4f:3b:92:46:a2:51:d8:89:5b:3a:
cc:ce:7e:91:85:91:4c:1d:d2:ec:9a:4b:7a:ce:17:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:63:D5:F8:E1:9F:2D:FD:D7:B1:7D:D0:A8:19:88:1E:74:1C:38:51
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4GPV-OGfLf3XsX3QqBmIHnQcOFE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:c7:86:4e:54:77:9f:66:d0:76:2d:b5:38:44:02:0a:b9:3b:
da:ef:23:1d:9d:16:88:bd:9c:02:45:3d:9b:6f:62:20:f0:4b:
42:55:02:f4:8b:ff:dd:79:0d:6f:5c:2f:2c:da:14:36:99:1f:
ab:d0:62:86:6a:7a:ea:4b:be:cb:24:f3:ca:6b:57:14:9d:6b:
b8:f7:16:98:65:d2:c5:1a:29:8e:67:d6:8f:9b:29:f3:38:51:
a0:ed:3b:f1:fa:07:5e:b0:f6:e5:4a:5e:1d:07:04:b9:a1:e8:
e1:b0:61:d1:7e:e1:48:12:6b:84:d4:2d:5f:d2:d8:47:e1:24:
0c:c4:22:fd:aa:8b:c7:4a:a6:e9:d8:38:58:4e:61:52:76:b5:
95:86:48:6b:9e:47:67:63:2b:80:de:2d:be:ba:4a:c4:36:77:
32:22:cf:82:e0:e6:e1:a6:e3:14:01:b9:d2:bc:07:78:4f:cc:
e3:c0:f9:fd:f4:23:87:a4:ee:97:b6:ee:56:96:7f:f3:cd:7b:
d1:f1:51:13:88:eb:aa:9c:b4:ff:a4:ce:f9:22:ee:fa:b9:a6:
a0:3d:02:9a:ef:2c:21:61:ac:9b:0d:0d:29:ac:7b:8f:56:22:
4f:2c:9a:6d:63:a6:6c:d0:56:23:4a:ba:13:70:e4:aa:77:0a:
36:93:3f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org